dtwxt88240 2018-05-30 09:52
浏览 102

通过gopcap将数据包发送到127.0.0.1

It seems that packets sent through using gopacket/gopcap are somehow 'sent' as they are visible in a tshark trace:

444 143.613451037    127.0.0.1 → 127.0.0.1    UDP 66 6000 → 8888 Len=22

but these packets never arrive on a process on the same machine listening on 127.0.0.1:8888 (for example netcat -ul 8888).

Does anybody have any hints on why this is or things to try? As mentioned, the packets are in fact visible in a tshark trace... they just seem to completely vanish after that.

... irrelevant
out , err := pcap.OpenLive(*iface, 65535, true, -1 * time.Second)
out.WritePacketData(buf.Bytes())
... irrevelant

The idea is to construct packets and send them on lo so that a process listening on 127.0.0.1:<some port> can actually see those packets.

IP src/dst are both 127.0.0.1 and ethernet src/dst are both 00:00:00:00:00:00.

Edit:

As far as some more research goes it seems to be the case that sending packets with pcap bypasses IP network stacks in such a way that the packets can't be seen by processes. A workaround is to strip the lower levels of the packets in the trace and open a regular udp/tcp socket and send the payload through that socket.

  • 写回答

1条回答 默认 最新

  • duancao1951 2018-06-13 14:35
    关注

    As far as some more research goes it seems to be the case that sending packets with pcap bypasses IP network stacks in such a way that the packets can't be seen by processes. A workaround is to strip the lower levels of the packets in the trace and open a regular udp/tcp socket and send the payload through that socket.

    评论

报告相同问题?

悬赏问题

  • ¥50 potsgresql15备份问题
  • ¥15 Mac系统vs code使用phpstudy如何配置debug来调试php
  • ¥15 目前主流的音乐软件,像网易云音乐,QQ音乐他们的前端和后台部分是用的什么技术实现的?求解!
  • ¥60 pb数据库修改与连接
  • ¥15 spss统计中二分类变量和有序变量的相关性分析可以用kendall相关分析吗?
  • ¥15 拟通过pc下指令到安卓系统,如果追求响应速度,尽可能无延迟,是不是用安卓模拟器会优于实体的安卓手机?如果是,可以快多少毫秒?
  • ¥20 神经网络Sequential name=sequential, built=False
  • ¥16 Qphython 用xlrd读取excel报错
  • ¥15 单片机学习顺序问题!!
  • ¥15 ikuai客户端多拨vpn,重启总是有个别重拨不上